CaseFlow uses a short-lived, one-time code sent to the unique email address registered against your account.
The code expires in 10 minutes. Five unsuccessful attempts invalidate the request, and a successful reset closes any existing signed-in session.